Doha Declaration

Education for Justice

Anti-forensics: Furthering digital forensic science through a new extended, granular taxonomy

Full title in original language:

Anti-forensics: Furthering digital forensic science through a new extended, granular taxonomy

Education level:

University

University (18+ years)

Topic / subtopic:

Cybercrime

Cybercrime investigation

Target audience:

Students, Teachers / Lecturers

Type of resource:

Publication / Article

Languages:

English

Region of relevance:

Global

Access:

open access

Individual authors:

Kevin Conlan, Ibrahim Baggili, Frank Breitinger

Publication year:

2016

Published by:

Digital Investigation

Copyright holder:

Contact name and address:

Digital Investigation

Contact website:

https://www.sciencedirect.com/journal/digital-investigation/vol/18/suppl/S

Key themes:

Links:

Publication

Short description:

Anti-forensic tools, techniques and methods are becoming a formidable obstacle for the digital forensic community. Thus, new research initiatives and strategies must be formulated to address this growing problem. In this work, the authors, first collect and categorize 308 anti-digital forensic tools to survey the field. Then they devise an extended anti-forensic taxonomy to the one proposed by Rogers (2006) in order to create a more comprehensive taxonomy and facilitate linguistic standardization. Their work also takes into consideration anti-forensic activity which utilizes tools that were not originally designed for anti-forensic purposes, but can still be used with malicious intent. This category was labeled as Possible indications of anti-forensic activity, as certain software, scenarios, and digital artifacts could indicate anti-forensic activity on a system.

Short description:

Anti-forensic tools, techniques and methods are becoming a formidable obstacle for the digital forensic community. Thus, new research initiatives and strategies must be formulated to address this growing problem. In this work, the authors, first collect and categorize 308 anti-digital forensic tools to survey the field. Then they devise an extended anti-forensic taxonomy to the one proposed by Rogers (2006) in order to create a more comprehensive taxonomy and facilitate linguistic standardization. Their work also takes into consideration anti-forensic activity which utilizes tools that were not originally designed for anti-forensic purposes, but can still be used with malicious intent. This category was labeled as Possible indications of anti-forensic activity, as certain software, scenarios, and digital artifacts could indicate anti-forensic activity on a system.

Doha Declaration

Education for Justice

Supported by the State of Qatar

60 years Crime Congress